How does the DVA protect my privacy?
This page outlines how your personal information is protected under the Privacy Act 1988 (the Privacy Act) and summarises how we meet our obligations under the Privacy Act when collecting, storing, using and disclosing personal information.
How is my personal information protected?
The Privacy Act contains rules on how Australian government agencies and organisations handle your personal information. We are bound by the Privacy Act and the 13 Australian Privacy Principles (APPs). The APPs outline how we collect, store, use and disclose personal information. The APPs also gives you a right to access and correct the personal information we hold about you.
DVA's Privacy Policy
DVA’s Privacy Policy contains detailed information about how DVA manages personal information, including the following:
- the kinds of personal information that we collect and hold about you
- how we collect your personal information
- how we hold your personal information
- the purposes for collecting, holding, using and disclosing your personal information
- how you may access your personal information held by us and correct that information where it is incorrect
- how you may make a complaint about the way we collect, hold, use or disclose personal information, and how we will deal with privacy related complaints; and
- whether we will (or are likely to) disclose your personal information to overseas recipients and the countries where such recipients may be located.
Access to our full privacy policy can be found here:
When can DVA collect my personal information?
Personal information about you may be collected by us through you, your representative or a third party, for example another government department. We will only collect personal information when it is reasonably necessary for one or more of the Department’s functions or activities.
We will collect sensitive information, including health information, with your consent and where the information is reasonably necessary for or directly related to our functions or activities.
What must DVA do when collecting my personal information?
When DVA collects your personal information, DVA is required to inform you of a number of matters. These include:
- the purpose for which your information is being collected
- any person or body to whom we usually disclose the information; and
- whether your personal information will be disclosed to overseas recipients.
Generally, this information is on forms and applications and is also available on the DVA website or on request. In some instances DVA has specific program or service privacy collection notices. For example: MyService Privacy Collection Notice.
Privacy Collection Notices Register
| Reference | Date Finalised | Privacy Collection Notice |
|---|---|---|
| 7 September 2024 | MyService Privacy Collection Notice |
How does DVA store my personal information?
We store personal information in a variety of formats, including in paper and electronic form.
We take all reasonable steps to protect personal information it holds from misuse, interference and loss, as well as unauthorised access, modification or disclosure.
All personal information is stored securely, and access is restricted to employees, contractors and service providers who require access to personal information to perform their duties.
When can DVA use and disclose my personal information?
We generally use and discloses the personal information it holds for the primary purpose for which the information was collected. For example, where a person provides us with their personal information in order to make a claim, we will use or disclose that information to process the claim.
We will only use or disclose personal information for a secondary purpose as permitted by the Privacy Act. Some examples are:
- where the person to whom the information relates has consented to the use or disclosure
- where the person would reasonably expect the use or disclosure to occur; or
- where the use or disclosure is undertaken for the prevention, detection, investigation or prosecution of a criminal offence.
Our Privacy Policy has further information on when secondary uses or disclosures may occur.
How can I access or correct personal information DVA holds about me?
We want to make it easier to access your personal information.
For more information about accessing your personal documents see our
How is my personal information managed in the processing of social security claims?
As we process some claims under the Social Security Act 1991 (Social Security Act), additional confidentiality provisions apply to the collection, use and disclosure of the information collected for the purposes of processing these claims. These provisions operate alongside the Privacy Act.
How is my tax file number protected?
The Privacy Act also protects the use of your tax file number (TFN). Under the Privacy Act, we are required to only use your TFN for tax related purposes, to keep TFNs secure, to restrict access to authorised staff and only release TFNs in accordance with taxation laws.
While you are not required to provide your TFN in all situations, quotation of TFNs is a condition of receipt of most Australian Government assistance payments, including DVA income support payments and permanent impairment payments.
Your TFN may be used for data-matching purposes. Data-matching between the Australian Taxation Office (ATO) and assistance agencies such as the Department of Human Services (Centrelink) and DVA is regulated under the Data-Matching Program (Assistance and Tax) Act 1990. This Act authorises agencies to compare personal information they hold to ensure tax, pensions, benefits and other payments are being paid correctly.
Under the Privacy Act, the Office of the Australian Information Commissioner (OAIC) is responsible for issuing guidelines to protect privacy, investigating complaints and monitoring the way agencies like DVA conduct data-matching programs.
I think my privacy has been breached, how do I make a complaint?
If you believe we have breached your privacy rights, you may contact us through the following:
- Email: privacy [at] dva.gov.au (privacy[at]dva[dot]gov[dot]au)
- Manager
Department of Veterans' Affairs
GPO Box 9998
BRISBANE QLD 4001
Please include a description of what has happened and how you feel it has impacted on you. If you are dissatisfied with the way we have handled your privacy-related complaint, you may contact the OAIC.
Privacy Impact Register
The Privacy (Australian Government Agencies — Governance) APP Code 2017 (Privacy Code), requires us to undertake privacy impact assessments (PIAs) in certain instances and to maintain a register of those PIAs from 1 July 2018. The Privacy Code also requires us to publish the PIA register, or a version of the register on our website.
| Reference | Date Finalised | Subject of PIA |
|---|---|---|
| 5 July 2024 | Adobe CJA for MyService | |
| 18 June 2024 | Enhanced myGov App and Digital Wallet - DVA Veteran Card into MyGov Digital Wallet (MAP 2491) | |
| 23 January 2024 | Voluntary Patient Registration for Veterans and Their Families (DVA MyMedicare) Project 23 | |
| 50273 | 31 May 2023 | Adverse Events Analysis Program |
| 2203210 | 18 July 2022 | Space Data Management Software |
| 2110449 | 29 June 2022 | Wellbeing and Support Program |
| 2200825 | 10 November 2020 | Rehabilitation Provider Program |
| 25205 | 4 April 2020 | Information sharing between DVA and Defence (Early Engagement Model Data and Claims Data) |
| 28790 | 23 December 2019 | DVA Website Virtual Assistant (Chat Bot) |
| 30131 | 17 December 2019 | Commemorative events registration, ticketing and accreditation services (France and Türkiye) |
| 29920 | 3 December 2019 | Procurement of a provider to conduct quality and safety audits of community nursing providers |
| 19273680E | 12 December 2018 | Veteran Centric Reform – Telephony Project |
| 22948 | 1 July 2018 | Implementation of the Cloud hosted replacement Veterans Review Board Case Management System |
| 24276 | 16 February 2018 | Clinical Coding and Billing Audit |
| 18007230 | 16 November 2018 – 30 January 2019 | DVA Triage Project — Advice on sharing of client information between Open Arms and the Department of Veterans’ Affairs |
| Not specified | 2016 | Veterans’ Affairs Legislation Amendment (Digital Readiness and Other Measures) Bill 2016 — Public Interest Disclosure Provisions |
| This register was last updated on 22 August, 2024. | ||
More Information
DVA General Enquiries
Phone: 1800 VETERAN (1800 838 372) *
Email: GeneralEnquiries [at] dva.gov.au (GeneralEnquiries[at]dva[dot]gov[dot]au)
Online: DVA Website
* Calls from mobile phones and pay phones may incur additional charges.
Related Factsheets
Disclaimer
The information contained in this Factsheet is general in nature and does not take into account individual circumstances. You should not make important decisions, such as those that affect your financial or lifestyle position on the basis of information contained in this Factsheet. Where you are required to lodge a written claim for a benefit, you must take full responsibility for your decisions prior to the written claim being determined. You should seek confirmation in writing of any oral advice you receive from DVA.